writeups.xyz / Unauthorized access to Codespace secrets in GitHub

Submitter : c2a

Date: 7 March 2023

Bounty : undisclosed

Vulnerabilities :

• Logic Flaw
• Broken Access Control
• Account Takeover

Programs :

• GitHub

Authors :

• Ophion Security (@OphionSecurity)

Link :
https://ophionsecurity.com/blog/access-organization-secrets-in-github